Plugging in BBC Microbit appears to allow access to removable drive which should have access blocked by policy.

Hello,

Has this port been approved by some kind of whitelist?

Can you confirm what the Microbit shows as under Computer, does it show as a pen drive? Can you attach a screenshot?

Is the removable drive policy correctly applied to this machine? Have you tried other drives plugged in?

Which drive was previously encrypted that you're allowed access to?

Hello,

Has this port been approved by some kind of whitelist?

Can you confirm what the Microbit shows as under Computer, does it show as a pen drive? Can you attach a screenshot?

Is the removable drive policy correctly applied to this machine? Have you tried other drives plugged in?

Which drive was previously encrypted that you're allowed access to?

Shows as a pen drive, have set a policy which should reject unencrypted volumes.

ICTUCNES said:

Shows as a pen drive, have set a policy which should reject unencrypted volumes.

So your removable media encryption policy is volume based? How is the hard drive encrypted? SGNDE or Bitlocker?

The policy is volume based.  We do not use Bitlocker.

Can you share a screenshot of the RSOP, where we can see what the expected removable drive encryption policy is?

I am trying to block access to any unencrypted removable disk but having inconsistent results.  For example I have an unencryted pen drive here, if it is inserted prior to system boot users will have complete access to it.  If removed and inserted into another usb port then it is  blocked but if removed and added into the same port and full acccess restored once again...

The setting Reject means "Do not encrypt" the drive. Unfortunately it does not mean "block access" to it.

Thanks for your response.  Do you have an instruction of how to block?